mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 12:27:59 +00:00
b5564572bc
This implementation increases parallel write capabilities of the eventstore. Please have a look at the technical advisories: [05](https://zitadel.com/docs/support/advisory/a10005) and [06](https://zitadel.com/docs/support/advisory/a10006). The implementation of eventstore.push is rewritten and stored events are migrated to a new table `eventstore.events2`. If you are using cockroach: make sure that the database user of ZITADEL has `VIEWACTIVITY` grant. This is used to query events.
79 lines
1.9 KiB
Go
79 lines
1.9 KiB
Go
package instance
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/zitadel/zitadel/internal/errors"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
)
|
|
|
|
const (
|
|
securityPolicyPrefix = "policy.security."
|
|
SecurityPolicySetEventType = instanceEventTypePrefix + securityPolicyPrefix + "set"
|
|
)
|
|
|
|
type SecurityPolicySetEvent struct {
|
|
eventstore.BaseEvent `json:"-"`
|
|
|
|
Enabled *bool `json:"enabled,omitempty"`
|
|
AllowedOrigins *[]string `json:"allowedOrigins,omitempty"`
|
|
}
|
|
|
|
func NewSecurityPolicySetEvent(
|
|
ctx context.Context,
|
|
aggregate *eventstore.Aggregate,
|
|
changes []SecurityPolicyChanges,
|
|
) (*SecurityPolicySetEvent, error) {
|
|
if len(changes) == 0 {
|
|
return nil, errors.ThrowPreconditionFailed(nil, "POLICY-EWsf3", "Errors.NoChangesFound")
|
|
}
|
|
event := &SecurityPolicySetEvent{
|
|
BaseEvent: *eventstore.NewBaseEventForPush(
|
|
ctx,
|
|
aggregate,
|
|
SecurityPolicySetEventType,
|
|
),
|
|
}
|
|
for _, change := range changes {
|
|
change(event)
|
|
}
|
|
return event, nil
|
|
}
|
|
|
|
type SecurityPolicyChanges func(event *SecurityPolicySetEvent)
|
|
|
|
func ChangeSecurityPolicyEnabled(enabled bool) func(event *SecurityPolicySetEvent) {
|
|
return func(e *SecurityPolicySetEvent) {
|
|
e.Enabled = &enabled
|
|
}
|
|
}
|
|
|
|
func ChangeSecurityPolicyAllowedOrigins(allowedOrigins []string) func(event *SecurityPolicySetEvent) {
|
|
return func(e *SecurityPolicySetEvent) {
|
|
if len(allowedOrigins) == 0 {
|
|
allowedOrigins = []string{}
|
|
}
|
|
e.AllowedOrigins = &allowedOrigins
|
|
}
|
|
}
|
|
|
|
func (e *SecurityPolicySetEvent) Payload() interface{} {
|
|
return e
|
|
}
|
|
|
|
func (e *SecurityPolicySetEvent) UniqueConstraints() []*eventstore.UniqueConstraint {
|
|
return nil
|
|
}
|
|
|
|
func SecurityPolicySetEventMapper(event eventstore.Event) (eventstore.Event, error) {
|
|
securityPolicyAdded := &SecurityPolicySetEvent{
|
|
BaseEvent: *eventstore.BaseEventFromRepo(event),
|
|
}
|
|
err := event.Unmarshal(securityPolicyAdded)
|
|
if err != nil {
|
|
return nil, errors.ThrowInternal(err, "IAM-soiwj", "unable to unmarshal oidc config added")
|
|
}
|
|
|
|
return securityPolicyAdded, nil
|
|
}
|